The UK's Information Commissioner's Office has fined Bupa £175,000 after an investigation found the health insurer failed to have "effective security measures in place to protect customers' personal information" in the wake of a massive breach that saw a rogue employee extract data and put it up for sale on the dark web.
